From 9e9182b9231289cc765cd30232a53030a8792b73 Mon Sep 17 00:00:00 2001 From: zc <2650838+Wack0@users.noreply.github.com> Date: Fri, 18 Aug 2023 11:45:44 +0100 Subject: [PATCH] push button decrypt: mention exploitable major windows versions now Nickel is known to work --- readme.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/readme.md b/readme.md index 9065b32..5826c78 100644 --- a/readme.md +++ b/readme.md @@ -90,3 +90,5 @@ At this point, the on-disk BitLocker metadata will contain a plaintext VMK. Dump it, and use that VMK to decrypt the FVEK. The decrypted FVEK can be used on the disk image made previously to decrypt the partition. +Please note: I only successfully exploited this issue on Windows 10 in very specific circumstances (TPM-only BitLocker with no recovery key). + However, [others have successfully exploited this issue using a vulnerable WinRE on Windows 11 (Nickel)](https://blog.scrt.ch/2023/08/14/cve-2022-41099-analysis-of-a-bitlocker-drive-encryption-bypass/). \ No newline at end of file